Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account
2026-05-19T20:51:59Z•4022c26ded331bcebca2338d3bf909a076845879ce983906a47e226e55dcc8f9
antvcache_poisoningcredential_stealergithub_actionsmalwaremini_shai-huludnode-ipcnpmoidc_token_exfiltrationpypislsa_attestationsoftware_supply_chainsupply_chaintanstack
What happened
Multiple Snyk reports describe the “Mini Shai‑Hulud” supply‑chain worm campaign in May 2026: attacker(s) compromised maintainer accounts and CI pipelines to publish hundreds of malicious npm package versions (including >300 malicious versions across 323 AntV packages, 84 artifacts across TanStack/@tanstack/* and related packages, and malicious node-ipc releases) and a malicious PyPI release (lightning) shipping a Bun‑based credential stealer that runs on import. The campaign chained techniques including GitHub Actions “Pwn Request” attacks, cache poisoning, OIDC token extraction from runner‑VM
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- snyk_blog
- Record identifier
- 4022c26ded331bcebca2338d3bf909a076845879ce983906a47e226e55dcc8f9
- Enrichment time
- 2026-05-19T20:51:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.